Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.
http://bugs.mantisbt.org/changelog_page.php
http://secunia.com/advisories/16506
http://secunia.com/advisories/17362
http://secunia.com/advisories/17654
http://www.debian.org/security/2005/dsa-905
Source: MITRE
Published: 2005-10-27
Updated: 2008-09-05
Type: NVD-CWE-Other
Base Score: 5
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Impact Score: 2.9
Exploitability Score: 10
Severity: MEDIUM